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DETAILED ACTION 

1 . Applicant's election without traverse of Group I, claims 1-13 and 36-49, in tlie reply filed 
on 07/26/07 is acknowledged. Claims 1-57 are pending. Claims 1-13 and 36-49 have been 
examined. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claim 1-13 and 36-49 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Shimizu et al. US 6,085,323 (hereinafter Shimizu) in view of Al-Salqan (US 6,775,382 B1). 

4. As per claim 1, Shimizu teaches a method of transmitting data using encryption between 
a sender and a receiver, the method comprising: 

generating a first encryption key unknown to the receiver (i.e., random number generator 
3 of fig 1. column 7, lines 4-7); 

encrypting said data to be transmitted from the sender to the receiver using said first key 
(i.e., encrypting device 4, of fig 1, column 7, lines 10-13); 

providing separate Second Information Processing Systems (SIPSs) in secure local 
communication with both the sender and the receiver [figures 1-3]; 

the sender transmitting to its SIPS the first encryption key and information dependent on 
an identity of the receiver; the SIPS of the sender selecting one of a plurality of second keys 
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corresponding to the information dependent on the Identity of the receiver and a unique 
identifier corresponding to said selected second key, said identifier and said corresponding 
selected second key being known to the SIPS of the receiver (i.e., key selection, column 14, 
lines 15-30); 

the SIPS of the sender encrypting the first encryption key using the selected second key 
to provide an encrypted first key (i.e., encrypting temporary key using master key, column 7, 
lines 13-21 and column 14, lines 22-30); 

transmitting said encrypted first key, said identifier and said data to be transmitted from 
the sender to the receiver using said first key over a generally unsecured transmission link 
[column 7, lines 17-22 and lines 39-49 and fig 1-3]; 

transmitting from the receiver to the SIPS of the receiver said encrypted first key and 
said identifier [column 7, lines 17-22 and lines 39-49]; 

the SIPS of the receiver decrypting said encrypted first key using said second encryption 
key to provide the receiver with the first encryption key [column 8, lines 7-19 and column V5, 
lines 14-35]; and 

the receiver decrypting said data using said the retrieved first encryption key [column 8, 
lines 7-19 and column 15, line 54-column 16, line 6]. Shimizu further teaches SIPS identification 
means to identify a correspondent key and a correspondent key identifier. Shimizu is silent on 
the method including the steps of encrypting correspondent key identifier using a public key to 
generate a secured key identifier. Al-Salqan teaches a system for recovering encryption keys, 
including storing a public key, encrypting/decrypting a correspondent key identifier (i.e., key 
recovery information) using said public key thereby extracting the corresponding key identifier 
[column 2, lines 65-column 3, line 10]. Therefore, it would have been obvious to one having 
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ordinary skill in the art at the time of applicant's invention to employ the teachings of Al-Salqan 
within the system of Shimizu in order to enhance the security of the system. 

5. As per claims 2, 36 and 45, Shimizu teaches an information process arrangement 
comprising a First Information Processing System (FIPS) and a Second Information Processing 
System (SIPS) arranged separate from the FIPS and capable of exchanging signals with the 
FIPS [see figures 1-3], wherein the FIPS comprises 

FIPS key generation means to generate a first key (i.e., random number generator 3 of 
fig1 , column 7, lines 4-7); 

FIPS encryption means to encrypt sensitive data using the first key, thereby generating 
temporarily secured sensitive data (i.e., . encrypting device 4, of fig 1, column 7. lines 10-13); 

FIPS correspondent selection means to select correspondent data to which the sensitive 
data is destined (i.e., selection of user or group, column 14, lines 15-22); and 

FIPS storage means to store temporarily secured sensitive data (i.e., storage device 12 
of fig 1); 

the SIPS comprises SIPS storage means to store correspondence data, a plurality of 
keys, a plurality of key identifiers (i.e., IC Card, 5 of figure 1, column 14, lines 4-15); SIPS 
identification means to identify a correspondent key and a correspondent key identifier based on 
received FIPS selected correspondent data (i.e., key selection, column 14, lines 15-30); and 

SIPS encryption means to encrypt FIPS received first key using said identified 
correspondent key, and thereby generating a secured first key (i.e., encrypting temporary key 
using master key, column 7. lines 13-21 and column 14, lines 22-30); 

the FIPS further comprises FIPS secured data integration means to integrate into 
temporarily secured sensitive data, received SIPS secured first key and integrated secured 
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sensitive data [column 7, lines 17-22 and lines 39-49]. Shimizu further teaches SIPS 
identification means to identify a correspondent key and a correspondent key identifier. Shimizu 
is silent on the method including the steps of encrypting correspondent key identifier using a 
public key to generate a secured key identifier. Al-Salqan teaches a system for recovering 
encryption keys, including storing a public key, encrypting a correspondent key identifier (i.e., 
key recovery information) using said public key thereby generating a secured key identifier 
[column 2, lines 65-column 3, line 10]. Therefore, it would have been obvious to one having 
ordinary skill in the art at the time of applicant's invention to employ the teachings of Al-Salqan 
within the system of Shimizu in order to enhance the security of the system. 

6. As per claims 9. 41 and 48. Shimizu teaches an information process arrangement 
comprising a First Information Processing System (FIPS) and a Second Information Processing 
System (SIPS) arranged separate from the FIPS and capable of exchanging signals with the 
FIPS, wherein the FIPS comprises 

FIPS storage means to store integrated secured sensitive data (i.e., storage device 12 of 
fig 1); and 

FIPS secured data extraction means to extract from integrated secured sensitive data a 
secured first key, a secured key identifier, and temporarily secured sensitive data (i.e., key 
selection, column 14, lines 15-30); 

the SIPS comprises SIPS storage means to store correspondence data, a plurality of 
keys, a plurality of key identifiers (i.e., IC Card, 5 of figure 1, column 14, lines 4-15); 

SIPS decryption means to decrypt FIPS received secured first key using the key 
corresponding in the SIPS storage means to extracted key identifier, thereby extracting the first 
key [column 8, lines 7-19 and column V5. lines 14-35]; and 
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the FIPS further comprises FIRS decryption means to decrypt temporarily secured 
sensitive data using the SIPS received first key, therefore extracting the sensitive data [column 
8, lines 7-19 and column 15, line 54-column 16, line 6]. Shimizu further teaches SIPS 
identification means to identify a correspondent key and a correspondent key identifier. Shimizu 
is silent on the method including the steps of encrypting correspondent key identifier using a 
public key to generate a secured key identifier. Al-Salqan teaches a system for recovering 
encryption keys, including storing a public key, encrypting/decrypting a correspondent key 
identifier (i.e., key recovery information) using said public key thereby extracting the 
corresponding key identifier [column 2, lines 65-column 3, line 10]. Therefore, it would have 
been obvious to one having ordinary skill in the art at the time of applicant's invention to employ 
the teachings of Al-Salqan within the system of Shimizu in order to enhance the security of the 
system. . 

7. As per claims 3, 10, 37, 42, 46 and 49, Shimizu further teaches the system further 
comprising authentication means receiving user provided authentication data which is compared 
with SIPS stored authentication data in order to grant or deny SIPS use [column 7. lines 4-21]. 

8. As pec claims 4, Shimizu further teaches the system wherein the SIPS further comprises 
integration means to integrate SIPS encrypted data in a single signal communicated to the FIPS 
[column 7, lines 4-21 and figures 1-3]. 

9. . As per claims 5, 11, 39 and 44, Shimizu further teaches the system wherein the FIPS 
further comprises at least one of: communication control means to close external 
communication when a securing sensitive data process is initiated, anti-spy means to prevent 
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undesired means to record signal exchanged between the FIPS and the SIPS, and automatic 
deletion means to erase from the FIPS at least one of unsecured, FIPS secured and SIPS 
secured data else that integrated secured sensitive data one the integrated secured sensitive 
data has been generated [column 7, lines 4-21 and figures 1-3]. 

10. As per claims 6, 12, 40 and 47, Shimizu further teaches the system wherein the SIPS 
further comprises puzzling means that complete at least one of: creating unnecessary signals 
between valuable signals transmitted to the FIPS, and modifying SIPS generated signals and 
data transmitted to the FIPS in order to render more difficult the reading of said signals and data 
[column 7, lines 4-21 and figures 1-3]. 

11. As per claim 7, Shimizu further teaches the system wherein a second processing 
arrangement having a SIPS component having stored correspondent key and associated 
correspondent key identifier corresponding to the information processing arrangement SIPS 
stored selected correspondent key and correspondent key identifier is necessary to decrypt the 
integrated secured sensitive data generated by the information processing arrangement 
[column 7, lines 4-21 and figures 1-3]. 

12. As per claims 8 and 13, Shimizu further teaches the system wherein the FIPS is a data 
processing system including communication capability and the FIPS is a smart card comprising 
computing capability [column 7, lines 4-21 and figures 1-3], 
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13. As per claim 38 and 43, Shimizu further teaches the system further comprising at least 
one of: storing integrated secured data on accessible holding means and communicating 
integrated secured data to a correspondent FIPS [column 7, lines 4-29]. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Beemnet W. Dada whose telephone number is (571) 272-3847. The 
examiner can normally be reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Beemnet W Dada 
September 24, 2007 
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